Package Management

Debian 9 — flatpak — multiple vulnerabilities (2 CVEs) — patch and remediation guide — diagnosis and fix on Debian 9

Debian 9 — flatpak — multiple vulnerabilities (2 CVEs) — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 20 December 2019 Affected versions: Debian 9 (stretch) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2017-9780 CVE-2019-8308 Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – Primary Fix Solution – Alternative Approaches Verification & […]

Read more
FreeBSD 12 — pecl-phar — vulnerability — patch and remediation guide — diagnosis and fix on FreeBSD 12

FreeBSD 12 — pecl-phar — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 19 December 2019 Affected versions: FreeBSD 12 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: pecl-phar — format string vulnerability Related CVEs: CVE-2010-2094 Upstream summary: Entry for CVE-2010-2094 says: Multiple format string vulnerabilities in the phar extension in PHP 5.3 before 5.3.2 allow context-dependent attackers […]

Read more
FreeBSD 12 — sql-ledger — multiple vulnerabilities (3 CVEs) — patch and remediation guide — diagnosis and fix on FreeBSD 12

FreeBSD 12 — sql-ledger — multiple vulnerabilities (3 CVEs) — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 19 December 2019 Affected versions: FreeBSD 12 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: sql-ledger — security bypass vulnerability Related CVEs: CVE-2006-4244 CVE-2006-4731 CVE-2006-5872 Upstream summary: Chris Travers reports: George Theall of Tenable Security notified the LedgerSMB core team today of an authentication bypass […]

Read more
FreeBSD 12 — py23-django — multiple vulnerabilities (3 CVEs) — patch and remediation guide — diagnosis and fix on FreeBSD 12

FreeBSD 12 — py23-django — multiple vulnerabilities (3 CVEs) — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 19 December 2019 Affected versions: FreeBSD 12 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: django — multiple vulnerabilities Related CVEs: CVE-2008-2302 CVE-2009-3695 CVE-2010-3082 Upstream summary: The Django project reports: Please reference CVE/URL list for details Table of contents Symptom & Impact Environment & Reproduction […]

Read more
How to Install and Configure FreeIPA on RHEL 7 — step-by-step RHEL 7 tutorial on Progressive Robot

How to Install and Configure FreeIPA on RHEL 7

How to Install and Configure FreeIPA on RHEL 7 FreeIPA is an integrated identity and authentication solution that combines LDAP (via 389 Directory Server), Kerberos, DNS, a certificate authority (Dogtag PKI), and a web-based management interface into a single coherent platform. It is Red Hat’s upstream open-source project that underpins Red Hat Identity Management (IdM), […]

Read more
FreeBSD 12 — gcpio — multiple vulnerabilities (4 CVEs) — patch and remediation guide — diagnosis and fix on FreeBSD 12

FreeBSD 12 — gcpio — multiple vulnerabilities (4 CVEs) — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 19 December 2019 Affected versions: FreeBSD 12 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: GNU cpio — multiple vulnerabilities Related CVEs: CVE-2014-9112 CVE-2015-1197 CVE-2016-2037 CVE-2019-14866 Upstream summary: Sergey Poznyakoff reports: This stable release fixes several potential vulnerabilities CVE-2015-1197: cpio, when using the –no-absolute-filenames option, […]

Read more
How to Configure Fail2Ban to Protect SSH on RHEL 7 — step-by-step RHEL 7 tutorial on Progressive Robot

How to Configure Fail2Ban to Protect SSH on RHEL 7

How to Configure Fail2Ban to Protect SSH on RHEL 7 Even with SSH key-based authentication enabled, your server’s port 22 (or whatever port SSH is listening on) is constantly targeted by automated bots scanning the internet for open SSH services. These bots attempt thousands of login combinations per hour. While they cannot succeed against key-only […]

Read more
Ubuntu 18.04 — freetds — vulnerability — patch and remediation guide — diagnosis and fix on Ubuntu 18.04

Ubuntu 18.04 — freetds — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 19 December 2019 Affected versions: Ubuntu 18.04 (bionic) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-4173-1 Related CVEs: CVE-2019-13508 Upstream summary: Felix Wilhelm discovered that FreeTDS incorrectly handled certain types after a protocol downgrade. A remote attacker could use this issue to cause FreeTDS to […]

Read more
Oracle Linux 8 — WALinuxAgent — vulnerability — patch and remediation guide — diagnosis and fix on Oracle Linux 8

Oracle Linux 8 — WALinuxAgent — vulnerability — patch and remediation guide (ELSA-2019-1527)

🟡 Medium   ⏱ 10–30 min  Last verified: 19 December 2019 Affected versions: Oracle Linux 8 📖 ~4 min read  •  Source: ELSA advisory ELSA-2019-1527 Related CVEs: CVE-2019-0804 Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – Primary Fix Solution – Alternative Approaches Verification & Acceptance […]

Read more
How to Install pgAdmin 4 on RHEL 8 — step-by-step RHEL 8 tutorial on Progressive Robot

How to Install pgAdmin 4 on RHEL 8

pgAdmin 4 is the official open-source administration and development platform for PostgreSQL, providing a rich web interface for managing databases, running queries, monitoring activity, and visualizing schemas. On RHEL 8, the recommended installation path is the official PostgreSQL Global Development Group (PGDG) repository, which ships pgAdmin 4 as a dedicated web application package with a […]

Read more
CHAT